Open Cloud credentials are missing, invalid, or lack permissions

SymptomCopy link to Symptom

Clan Labs says Roblox Open Cloud is not configured, the credential is invalid, a group write is forbidden, or rank and pending-join actions fail while read-only dashboard features still work.

Most likely causesCopy link to Most likely causes

• No Open Cloud User API Key is saved for the community.
• The key expired, was revoked, or was copied incorrectly.
• The key does not include the intended Roblox group.
• groups access is missing group:read or group:write.
• An IP restriction excludes Clan Labs.
• A different secret, such as a Clan Labs API key, was entered.

Diagnostic checksCopy link to Diagnostic checks

1. Open Settings → Roblox Open Cloud as SuperOwner.
2. Check whether Clan Labs shows a configured credential; it will not reveal the secret again.
3. In Roblox Creator Hub, inspect the key’s group resource, operations, expiry, and IP restrictions.
4. Confirm the numeric group ID matches this community.
5. Determine whether reads, writes, or both fail.

ResolutionCopy link to Resolution

Create a replacement Roblox User API Key with the intended group under groups, allow group:read and group:write, and do not add an IP restriction. Set an expiry only if you can rotate the key before it ends. Save it once in the Clan Labs Open Cloud form, then revoke the old key in Roblox.

A Clan Labs cl_live_ API key cannot replace a Roblox Open Cloud key.

When to retryCopy link to When to retry

Test one low-risk read or authorised test-member action after saving the replacement. Following an uncertain rank write, check Roblox’s current rank before retrying.

Contact supportCopy link to Contact support

Contact Clan Labs support when the resource and operations are correct but Clan Labs still rejects a freshly created key.

Include this informationCopy link to Include this information

Include community and Roblox group IDs, failed action, exact error, key creation and test times, and a redacted screenshot of resource and operation names. Never include the key value.